CVE-2017-18446

cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...

CVE-2017-18443

cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...

CVE-2017-18469

cPanel before 62.0.17 allows demo accounts to execute code via an NVDatafetchinc API call SEC-233...

CVE-2017-18421

cPanel before 66.0.2 allows demo accounts to create databases and users SEC-271...

CVE-2017-18438

cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...

CVE-2017-18447

cPanel before 64.0.21 allows demo accounts to execute code via the ClamScannergetsocket API SEC-251...

CVE-2017-18441

cPanel before 64.0.21 allows demo accounts to redirect web traffic SEC-245...

CVE-2020-10121

cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...

CVE-2020-10117

cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace SEC-542...

CVE-2020-24918

A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parseauthenticationheader in libamprotocol-rtsp.so.1 in rtspsvc or cause a...

CVE-2025-23581

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Demo User DZS demo-user-dzs-showcase-your-admin-safely allows Stored XSS.This issue affects Demo User DZS: from n/a through = 1.1.0...

CVE-2024-34433

Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0...

exploit-21858

Command : python3 exploit.py TARGETURL FORMPATH EXTRAOPT...

AZL-74003 CVE-2026-22184 affecting package optipng 0.7.8-5

zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz...

10,000 WordPress Sites Protected Against Site Reset and Privilege Escalation Vulnerability in Demo Importer Plus WordPress Plugin

On November 27th, 2025, we received a submission for a Site Reset and Privilege Escalation vulnerability in Demo Importer Plus, a WordPress plugin with more than 10,000 active installations. This vulnerability can be leveraged to trigger a full site reset and assign the administrator role to the...

CVE-2024-2702

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1...

EUVD-2026-1368

Malicious code in kdb1-demo-v2 npm...

Malicious code in kdb1-demo-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a67f080ec14c4f32313e33736b6b67e59accae55e5e2c388613df54d5b5c85d The package kdb1-demo-v2 was found to contain malicious code. Source: ghsa-malware c1a20b2217012bae0720ec06b437e454ea9f37100cf6bbec5477a5460ff53424 A...

MAL-2026-117 Malicious code in kdb1-demo-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a67f080ec14c4f32313e33736b6b67e59accae55e5e2c388613df54d5b5c85d The package kdb1-demo-v2 was found to contain malicious code. Source: ghsa-malware c1a20b2217012bae0720ec06b437e454ea9f37100cf6bbec5477a5460ff53424 A...

Malicious code in hello-world-npm-demo-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3d59e455a083fe1d90b99dc29e2b1d207b769331e331fd1e01a28e2a1e7060 The package hello-world-npm-demo-example was found to contain malicious code. Source: ghsa-malware...